MAL-2025-182443 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafeabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3563778737a5af8555bc41353f17bca309b26890b5f687e37c6e5e57d1367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdavgcab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2f0339a81ec818e29743546170ff2d8688a53ed7edfb06ea9d65fb3bb0fd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfccvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e23cf9ade965eab7582bc5b9b35ae77c5f520316edaebb50e48a752891e388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnuosgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf81aab2ff720e42a7d19b08e08a67933cc9801d782d116b07c2fc9cd2f71e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bavoiyabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f00acd245b0aee4ec3749772ca746248185f263e52968556fcab7089824c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisosaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ec58ba5e67f3bf59992e74f10e5b902864ec7abbc15f89368d74ee3b92f000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a57ae2e642933578096414997230afbdd20c6f802d7ae3042bb6e056def12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-bauav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0e3a1fffe7f2c4ade1239bca8c7c070ddf4d47915e066ce750804c70af8dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a1ecb444dd60c61287d188271161f85a805e7149db66f4c1776fdd066a348f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d1db462f9c42ed7b43321830fa159f3d4ee6d976f18eb6ce86ad6a2537f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhianagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffc18e7ec6285bb29c7408ed2134204af966c9df1782498a82c4bb1e113b838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68306d645661f39fa3b3e4062f33dc46b56d3c9216b59f155231498665cf3731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66868234ffc22c54dd48fd0efb37230334117a47d667d8825115ddfe72f840d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5a5239abae48e0b1e34104fde4096fe41f9f7f3af5d8a2df7e01587c5624ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacuon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95de16ce4aa95ba461c2d8ffbcad7e307b443730c4a424c44bfb182a696bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gistsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7710e05ac436c22f6c6dee39f3d306a00aa6940341d17b68fa49174d49750b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidabilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27041d654cedef123189d199b7f617041c7c94f9ee3c61a8db57bd7df566f39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...